NetSight
IP …
medium6.5

CVE-2020-7499

A CWE-863: Incorrect Authorization vulnerability exists in U.motion Servers and Touch Panels (affected versions listed in the security notification) which coul…

Impact

A CWE-863: Incorrect Authorization vulnerability exists in U.motion Servers and Touch Panels (affected versions listed in the security notification) which could cause unauthorized access when a low privileged user makes unauthorized changes.

Affected products

VendorProductAffected versions
Schneider-ElectricMtn6501-0001 Firmware
before 1.4.2
Schneider-ElectricMtn6501-0002 Firmware
before 1.4.2
Schneider-ElectricMtn6260-0410 Firmware
before 1.4.2
Schneider-ElectricMtn6260-0415 Firmware
before 1.4.2
Schneider-ElectricMtn6260-0310 Firmware
before 1.4.2
Schneider-ElectricMtn6260-0315 Firmware
before 1.4.2

Weakness classification

CWE-863

References